Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A911B22E/83415B36379511EF87CFD64BC4F9AE02/JCq5H6fHpkrOd9m09mHijAsVuOA.mft
File: JCq5H6fHpkrOd9m09mHijAsVuOA.mft (raw, json)
Hash identifier: vZNKw3lPvdamZ6hIuXyU0Z9vc9WRAgMuqnGn6VF8kzg=
Subject key identifier: AE:0A:D9:9D:1A:7A:E2:4D:53:8C:B8:44:ED:D1:B9:23:E7:C6:0C:D0
Authority key identifier: 24:2A:B9:1F:A7:C7:A6:4A:CE:77:D9:B4:F6:61:E2:8C:0B:15:B8:E0
Certificate issuer: /CN=A911B22E/serialNumber=242AB91FA7C7A64ACE77D9B4F661E28C0B15B8E0
Certificate serial: 8C
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JCq5H6fHpkrOd9m09mHijAsVuOA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911B22E/83415B36379511EF87CFD64BC4F9AE02/JCq5H6fHpkrOd9m09mHijAsVuOA.mft
Manifest number: 8B
Signing time: Sat 29 Mar 2025 05:47:56 +0000
Manifest this update: Sat 29 Mar 2025 05:47:56 +0000
Manifest next update: Sat 05 Apr 2025 05:47:56 +0000
Files and hashes: 1: JCq5H6fHpkrOd9m09mHijAsVuOA.crl (hash: kLaS0YetuOaaKJgIOkdDt/LoICaWPYr/FMVl4Qv3E84=)
2: 95C79E36379611EF87CBA24DC4F9AE02.roa (hash: VSLP0SurFYr7NQK9R5lJWuMTjXBESVuwKDdrtUvBsXc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 140 (0x8c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911B22E
Validity
Not Before: Mar 29 05:47:56 2025 GMT
Not After : Apr 5 05:47:56 2025 GMT
Subject: CN=67e7898c-e95c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:b7:0b:f8:4c:0b:01:03:f3:6f:d3:84:b2:8e:
99:4f:1a:41:95:5a:fc:35:c5:e1:b0:c3:dc:9d:21:
b9:af:f7:76:6b:05:4b:89:b4:46:62:84:61:48:72:
cf:f0:27:27:db:16:95:14:e3:ac:45:9e:eb:f1:56:
ec:01:37:01:bf:6f:60:19:7d:3e:65:da:8d:11:21:
79:1d:09:b0:ca:64:dc:ef:42:e7:0a:7d:c6:d3:9d:
d2:0f:be:af:54:bc:1c:dc:e3:f8:51:6e:01:93:12:
ae:4d:84:b5:4d:49:eb:f6:d3:b2:6d:4b:45:27:79:
7e:23:54:ec:06:c4:af:78:83:f6:ae:9b:1b:fe:48:
f3:63:30:d8:c5:0e:8c:07:4d:13:20:a7:ab:8a:6b:
b0:b8:e6:a2:db:8f:59:80:46:c2:e3:8e:c5:27:50:
59:c7:91:df:1a:6a:b6:11:f7:22:61:68:aa:b1:55:
5e:33:b5:50:4d:3a:a4:61:be:25:87:ff:3a:13:ae:
09:4d:db:b8:76:21:d8:7d:1d:a0:de:34:6a:98:1c:
f7:7f:77:02:f5:d9:44:6a:5b:76:d6:75:ff:60:97:
ad:54:08:d6:c8:ed:d6:84:e6:32:a0:7f:a9:f6:9d:
7f:f7:2d:4e:e5:30:58:31:5a:f8:ad:65:1b:3a:5d:
0d:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:0A:D9:9D:1A:7A:E2:4D:53:8C:B8:44:ED:D1:B9:23:E7:C6:0C:D0
X509v3 Authority Key Identifier:
keyid:24:2A:B9:1F:A7:C7:A6:4A:CE:77:D9:B4:F6:61:E2:8C:0B:15:B8:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911B22E/83415B36379511EF87CFD64BC4F9AE02/JCq5H6fHpkrOd9m09mHijAsVuOA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JCq5H6fHpkrOd9m09mHijAsVuOA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B22E/83415B36379511EF87CFD64BC4F9AE02/JCq5H6fHpkrOd9m09mHijAsVuOA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
97:00:2d:0f:4e:50:c1:cc:48:d1:b2:fb:a1:03:67:e0:5f:69:
0f:b4:7b:57:fc:2d:d7:0c:e8:70:9e:51:fe:2f:38:fd:39:80:
6e:84:45:21:51:43:b3:d1:97:5e:ac:78:2f:3f:86:32:f8:52:
85:5a:89:17:8d:0b:87:66:41:03:9e:8c:bf:4a:94:b3:eb:2c:
77:d6:ae:0b:d7:04:08:97:8d:1b:ba:81:5c:4f:7f:64:70:a3:
49:8a:6e:c7:fb:73:95:df:a0:5d:82:eb:3f:7b:64:0e:60:10:
af:38:60:7a:cf:1e:15:9f:86:6d:1b:63:5b:08:6d:cb:18:83:
69:dd:aa:c2:41:08:e7:f3:49:6c:48:9e:4c:ab:1a:5b:e7:00:
4a:91:af:92:e2:d6:5c:bd:43:7f:6d:c0:3b:02:e5:8f:14:0a:
2d:c7:5c:14:2c:b1:d0:ec:e0:81:f6:93:b5:0a:bf:1d:2f:1f:
96:be:ac:a5:d8:6d:0c:e5:be:48:5b:4d:31:c7:4e:ae:d1:54:
5b:3b:f4:cf:f3:f7:7b:9b:e3:22:aa:59:19:1d:bc:4a:34:3f:
7c:dc:46:48:7b:77:21:60:93:88:66:bb:06:ad:72:3a:0d:5c:
4b:b1:51:72:db:f7:99:73:cc:2a:70:8b:a8:dd:df:86:7c:59:
ab:35:5e:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 19:37:58 2025 by rpki-client